Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: cZ4GKnULG4iR4AhsJPYyIEHmFh/KJXIrtpGzZiuUmpo=
Subject key identifier: 41:D1:3A:C3:9E:8C:EC:7B:BF:70:FC:A4:C3:EB:1A:49:94:D7:79:30
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 0197B7452CB748370F157C51C5C2AA543831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 07C2
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: UPjBcM2fxSdL9vDxVcmwjNuCBovqKghIzrd3fsmvd5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2c:b7:48:37:0f:15:7c:51:c5:c2:aa:54:38:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=41d13ac39e8cec7bbf70fca4c3eb1a4994d77930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:cc:7a:2c:00:5b:17:24:6b:79:16:9a:a0:
1b:ae:7e:ae:ec:7e:97:ed:b5:1b:83:21:69:67:d4:
81:0d:91:47:4a:6e:0b:82:73:8c:95:d5:03:de:9b:
b9:02:bc:0f:0a:d9:12:9f:d5:43:77:99:8e:8d:b2:
fc:42:f8:8c:61:3f:66:e9:eb:c2:d7:76:6a:25:ea:
f4:f1:a5:dc:be:39:ee:c8:9d:b8:8d:ba:ea:b1:3e:
1f:70:ae:34:f6:0f:b9:b7:fd:e2:e2:86:17:16:90:
91:a7:36:97:f7:2a:e6:5e:ef:d4:d7:fa:99:64:53:
d8:e5:74:6e:2e:c9:54:b0:c1:45:90:53:e6:62:f2:
39:18:45:12:ac:71:0a:8e:fc:ff:15:8d:e0:af:a4:
48:cf:4d:88:fe:cd:f8:96:0d:98:e6:0f:3e:64:bd:
c2:4e:64:d3:a9:c8:f9:4d:10:19:e4:cd:3d:1a:e2:
e8:44:9e:1e:df:7d:a9:37:70:4c:9f:71:13:32:e5:
22:64:37:70:9b:51:5f:7c:aa:b2:6d:4d:7f:cd:48:
75:2e:4e:99:3e:8a:3f:60:d0:be:f5:3b:fb:d7:0f:
f9:2e:69:20:51:94:ec:16:ea:f8:30:06:f9:8d:5a:
05:c7:ea:ea:fe:2c:d1:84:41:e7:f8:c9:88:3a:71:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D1:3A:C3:9E:8C:EC:7B:BF:70:FC:A4:C3:EB:1A:49:94:D7:79:30
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:41:c0:18:35:a4:31:16:e0:ea:d1:84:2c:d1:14:61:c4:10:
63:cc:6e:02:ed:d6:0e:32:f4:a3:a1:93:4c:72:49:48:5e:5a:
eb:7b:2c:8e:72:7a:e2:ba:ec:05:43:68:82:df:26:23:24:ec:
08:ad:d1:f2:ef:46:50:62:30:a1:eb:85:ea:94:45:40:4a:9d:
1b:73:8c:6a:ec:25:8f:be:80:ce:9c:24:ce:dd:3f:c9:a4:ae:
e8:84:7e:0a:84:64:b4:ff:e3:8c:41:37:c9:42:11:dc:a8:73:
2f:ff:17:d0:dd:ad:0a:06:b6:a7:b2:50:c4:3e:9f:01:46:6e:
98:00:4f:2a:d8:85:7c:03:05:01:14:05:a3:05:12:d2:8f:f0:
fc:a7:6c:ba:49:97:29:b6:be:b6:c2:04:95:5a:b0:af:82:4a:
02:29:36:ac:9d:3b:7b:29:c1:17:e5:13:fa:ea:1a:d2:4e:78:
a6:22:4e:d5:2f:2b:04:1d:21:34:4b:3a:6d:1e:ba:b4:34:8e:
c9:27:3d:2f:75:5a:20:06:24:58:eb:31:ad:75:8c:48:ff:45:
73:c5:3e:f0:9a:09:af:4d:69:aa:08:c7:9b:6a:91:b7:d4:c7:
ef:3c:97:6e:86:ef:f7:36:07:f2:53:b4:c8:7b:0c:6d:fe:c2:
9a:5d:9c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:55 2025 by rpki-client